In the Claims: 

Please amend claims 1-28 as follows: 

1. (Amended) A person authentication system for executing person authentication by 
comparing a template with sampling information, the template being person authentication data, 
and the sampling information being input by a user, the person authentication system comprising: 

a person authentication authority for issuing [a] an electronic person authentication 
certificate [storing template information] including the template; and 

a person authentication execution entity for obtaining the certificate including the 
template from the person authentication certificate issued by said person authentication authority 
and executing person authentication on the basis of the obtained template; 

wherein the person authentication certificate issued by said person authentication 
authority stores usage restriction information which includes at least either a certificate expiration 
date or a certificate usage number limit; and 

said person authentication execution entity checks the validity of the person 
authentication certificate on the basis of the certificate expiration date or the certificate usage 
number limit when the person authentication is executed on the basis of the person authentication 
certificate. 

2. (Amended) A person authentication system according to Claim 1, wherein said person 
authentication execution entity checks the validity of the person authentication certificate on the 
basis of [a] the certificate expiration date or [a] the certificate usage number limit in person 
authentication [processing] on the basis of the person authentication certificate, and then executes 
the person authentication by comparing the template, stored in the person authentication 
certificate, with sampling information input by [a] the user on the condition that the validity of 
the person authentication certificate has been confirmed on the basis of the certificate expiration 
date or the certificate usage number limit. 
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3. (Amended) A person authentication system according to Claim 1, wherein said person 
authentication execution entity has a person authentication executing device, and the person 
authentication executing device executes the following processing when usage restriction 
information of [a] the certificate usage number limit is stored in [a] the person authentication 
certificate: 

storing a set usage count in a memory of the person authentication executing device; 
updating usage count data stored in the memory every time the person authentication 
certificate is used; 

determining whether the usage count data is within the limits of the set usage count of the 
person authentication certificate; and 

executing person authentication by comparing user input sampling information with [a] 
the template stored in the person authentication certificate if the usage count data is within the 
certificate usage number limit. 

4. (Amended) A person authentication system according to Claim 1, wherein [a] the 
person [identification] authentication certificate issued by said person [identification certificate] 
authentication authority stores a template expiration date which is information on an expiration 
date of the template stored in the person [identification] authentication certificate; and 

said person authentication execution entity checks the validity of the template on the basis 
of the template expiration date in person authentication [processing] on the basis of the person 
authentication certificate. 

5. (Amended) A person authentication system according to Claim 1, wherein said person 
authentication execution entity checks the validity of [a] the template on the basis of [a] the 
template expiration date in person authentication [processing] on the basis of the person 
authentication certificate, and then executes the person authentication by comparing the template, 
stored in the person authentication certificate, with sampling information input by [a] the user 
on the condition that the validity of the template expiration date has been confirmed. 
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6. (Amended) A person authentication system according to Claim 1, wherein said person 
authentication execution entity functions as an information processing apparatus, and the 
information processing apparatus checks the validity of [the] a template expiration date or the 
certificate expiration date of a person authentication certificate which is set in the certificate 
stored in the information processing apparatus and then outputs a request for issuing the person 
authentication certificate to said person [identification certificate] authentication authority which 
issues the person authentication certificate when the validity can not be confirmed; 

said person [identification certificate] authentication authority makes the person 
authentication certificate in which a new expiration date is set and then issues the person 
[identification] authentication certificate to the information processing apparatus; and 

the information processing apparatus has storage means and stores the person 
[identification] authentication certificate, which is issued by said person identification certificate 
authority, in the storage means. 

7. (Amended) A person authentication system according to Claim 1, wherein said person 
[identification certificate] authentication authority checks the validity of a template expiration 
date or [an] the expiration date of an issued person [identification] authentication certificate, and 
then gives notice to an entity [received] receiving the person [identification] authentication 
certificate [of which a] that the template expiration date or the certificate expiration date is 
approaching. 

8. (Amended) A person authentication system according to Claim 1, wherein said person 
[identification certificate] authentication authority receives a request for updating an issued 
person authentication certificate from an entity that received the person [identification] 
authentication certificate, makes a second person authentication certificate in which [a] an 
updated certificate expiration date or [a] an updated certificate usage number limit is set 
according to the request, and then issues the second person authentication certificate. 
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9. (Amended) A person authentication system according to Claim 1, wherein said person 
[identification certificate] authentication authority receives a request for updating the template, 
stored in [a] the person [identification] authentication certificate which has been issued, from an 
authenticated user of [a] the person [identification] authentication certificate; and 

wherein said person [identification certificate] authentication authority nullifies the 
person [identification] authentication certificate according to the request and then makes a second 
person [identification] authentication certificate on the basis of [a] an updated template. 

10. (Amended) A person authentication system according to Claim 1, wherein said 
person [identification certificate] authentication authority receives data of a request for setting 
a template expiration date from an authenticated user of [a] the person [identification] 
authentication certificate, and then makes a second person [identification] authentication 
certificate in which [a] the template expiration date is set on the basis of the data of the request 
for setting [a] the template expiration date. 

11. (Amended) A person authentication system according to Claim 1, wherein said 
person [identification certificate] authentication authority and said person authentication 
executing entity execute mutual authentication, when data communication is performed 
therebetween, a data transmitter puts a digital signature on transmitted data, and a data receiver 
verifies the digital signature. 

12. (Amended) A person authentication system according to Claim 1, wherein the 
template is at least one of personal biotic information, personal nonbiotic information, and a 
password, 

wherein the personal biotic information is selected from at least one of the group 
consisting of [such as] fingerprint information, retina pattern information, iris pattern 
information, voice print information, and handwriting information[;] , and 

wherein the personal nonbiotic information is selected from at least one of the group 
consisting of [such as] seal information, passport information, driver's license information, and 
card information [; 

any combination of the personal biotic information and the personal nonbiotic 
information; or 

a combination of the above information and a password]. 
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13. (Amended) A person authentication system according to Claim 1, wherein said 
person [identification certificate] authentication authority puts a digital signature on a person 
authentication certificate issued by said person [identification certificate] authentication 
authority. 

14. (Amended) A person authentication method for executing person authentication by 
comparing a template with sampling information, the template being person authentication data, 
and the sampling information being input by a user, the person authentication method 
comprising: 

causing a person authentication authority to issue [a] an electronic person authentication 
certificate [storing template information] including the template; 

causing a person authentication execution entity to obtain the certificate including the 
template from the person authentication certificate issued by the person authentication authority 
and to execute person authentication on the basis of the obtained template; 

storing usage restriction information, which includes at least either a certificate expiration 
date or a certificate usage number limit, in the person authentication certificate issued by the 
person authentication authority [ ]; and 

causing the person authentication execution entity to check the validity of the person 
authentication certificate on the basis of the certificate expiration date or the certificate usage 
number limit in person authentication [processing] on the basis of the person authentication 
certificate. 

15. (Amended) A person authentication method according to Claim 14, wherein [a] the 
person authentication execution entity checks the validity of the person authentication certificate 
on the basis of [a] the certificate expiration date or [a] the certificate usage number limit in 
person authentication [processing] on the basis of the person authentication certificate, and then 
executes the person authentication by comparing the template, stored in the person authentication 
certificate, with sampling information input by [a] tfie user on the condition that the validity of 
the person authentication certificate has been confirmed on the basis of the certificate expiration 
date or the certificate usage number limit. 
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16. (Amended) A person authentication method according to Claim 14, wherein [a] the 
person authentication execution entity has a person authentication executing device, and the 
person authentication executing device executes the following processing when usage restriction 
information of [a] the certificate usage number limit is stored in [a] the person authentication 
certificate: 

storing a set usage count in a memory of the person authentication executing device; 
updating usage count data stored in the memory every time the person authentication 
certificate is used; 

determining whether the usage count data is within the limits of the set usage count of the 
person authentication certificate; and 

executing person authentication by comparing sampling information, input by a user, with 
[a] the template stored in the person authentication certificate if the usage count data is within 
the limits. 

17. (Amended) A person authentication method according to Claim 14, wherein the 
person [identification certificate] authentication authority stores a template expiration date, which 
is information on an expiration date of [a] the template stored in [a] the person identification 
certificate made by the person [identification certificate] authentication authority; and 

a person authentication execution entity checks the validity of the template on the basis 
of [a] the template expiration date in person authentication [processing] on the basis of the person 
authentication certificate. 

18. (Amended) A person authentication method according to Claim [17] 14, wherein the 
person authentication execution entity checks the validity of [a] the template on the basis of a 
template expiration date in person authentication [processing] on the basis of [a] the person 
authentication certificate, and then executes the person authentication by comparing the template, 
stored in the person authentication certificate, with sampling information input by [a] the user 
on the condition that the validity of the template expiration date has been confirmed. 
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19. (Amended) A person authentication method according to Claim 14, wherein said 
person authentication execution entity functions as an information processing apparatus; 

the information processing apparatus checks the validity of a template expiration date or 
[a] the certificate expiration date of a person authentication certificate which is set in the person 
authentication certificate stored in the information processing apparatus, and then outputs a 
request for issuing the person authentication certificate to [a] the person [identification 
certificate] authentication authority which issues the person authentication certificate when the 
validity can not be confirmed; 

the person [identification certificate] authentication authority makes the person 
authentication certificate in which a new certificate expiration date is set and then issues the 
person [identification] authentication certificate to the information processing apparatus; and 

the information processing apparatus has storage means and stores the person 
[identification] authentication certificate, which is issued by the person [identification certificate] 
authentication authority, in the storage means. 

20. (Amended) A person authentication method according to Claim 14, wherein the 
person [identification certificate] authentication authority checks the validity of a template 
expiration date or [an] the expiration date of [an] the issued person [identification] authentication 
certificate, and then gives notice to an entity [received] receiving the person [identification] 
authentication certificate [of which a] that the template expiration date or the certificate 
expiration date is approaching. 

2L (Amended) A person authentication method according to Claim 14, wherein the 
person [identification certificate] authentication authority receives a request for updating [an] the 
issued person authentication certificate from an entity [received] receiving the person 
[identification] authentication certificate, then [issues] makes a second person authentication 
certificate in which [a] an updated expiration date or [a] an updated certificate usage number 
limit is set according to the request, and issues [a certificate usage number limit] the second 
person authentication certificate . 
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22. (Amended) A person authentication method according to Claim 14, wherein the 
person [identification certificate] authentication authority receives a request for updating [a] the 
template, stored in [a] the person identification certificate which [has been] issued, from an 
authenticated user of [a] the person [identification] authentication certificate; and 

wherein the person [identification certificate] authentication authority nullifies the person 
[identification] authentication certificate according to the request and then makes a second person 
[identification] authentication certificate on the basis of [a] the updated template. 

23. (Amended) A person authentication method according to Claim 14, wherein the 
person [identification certificate] authentication authority receives data of a request for setting 
[a] the template expiration date from an authenticated user of [a] the person [identification] 
authentication certificate, and then makes [the] a second person [identification] authentication 
certificate in which [a] the template expiration date is set on the basis of the data of the request 
for setting [a] the template expiration date. 

24. (Amended) A person authentication method according to Claim 14, wherein the 
person [identification certificate] authentication authority and the person authentication executing 
entity [executes] execute mutual authentication, when data communication is performed 
therebetween, a data transmitter puts a digital signature on transmitted data, and a data receiver 
verifies the digital signature. 
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25. (Amended) An information processing apparatus for executing person authentication 
by comparing a template with sampHng information, the template being person authentication 
data, and the sampling information being input by a user, the information processing apparatus 
comprising: 

a section for storing the template in an electronic person authentication certificate to 
execute person authentication on the basis of [a] the person authentication certificate issued by 
a person authentication certificate authority which is a third part y, the person authentication 
certificate storing at least one of a certificate expiration date and a certificate usage number limit : 
and 

a section for checking the validity of the person authentication certificate on the basis of 
[a] the certificate expiration date or the certificate usage number limit in person authentication 
[processing] on the basis of the person authentication certificate, and then [executes] executing 
the person authentication by comparing the template, stored in the person authentication 
certificate, with the sampling information input by [a] the user on the condition that the validity 
of the person authentication certificate has been confirmed on the basis of the certificate 
expiration date or the certificate usage number limit. 

26. (Amended) An information processing apparatus for executing person authentication 
by comparing a template with sampling information, the template being person authentication 
data, and the sampling information being input by a user, the information processing apparatus 
comprising: 

a section for storing the template in an electronic person authentication certificate to 
execute person authentication on the basis of [a] the person authentication certificate issued by 
a person authentication certificate authority which is a third part y, the person authentication 
certificate storing at least one of a certificate expiration date and a certificate usajge number limit : 

a section for executing the following processing when usage restriction information of 
a valid certificate usage number limit is stored in [a] the person authentication certificate: storing 
a set usage count in a memory of the [device] information processing apparatus : updating the 
usage count [data] stored in the memory every time the person authentication certificate is used; 
determining whether the usage count [data] is within the limits of the [set] certificate usage 
[count] number limit of the person authentication certificate; and 
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executing person authentication by comparing user input sampling information with [a] 
the template stored in the person authentication certificate if the usage count [data] in memory 
is within the limits of the certificate usage number limit . 

27. (Amended) An information processing apparatus for executing person authentication 
by comparing a template with sampling information, the template being person authentication 
data, and the sampling information being input by a user, the information processing apparatus 
comprising: 

a section for storing the template in an electronic person authentication certificate to 
execute person authentication on the basis of [a] person authentication certificate issued by a 
person authentication certificate authority which is a third party , the person authentication 
certificate storing at least one of a certificate expiration date and a certificate usage number limit ; 
and 

a section for checking the validity of the template on the basis of [the] a template 
expiration date in person authentication [processing] on the basis of the person authentication 
certificate, and then [executes] executing the person authentication by comparing the template, 
which is stored in the person authentication certificate, with the sampling information input by 
[a] the user on [the] a condition that validity of the template expiration date has been confirmed. 

28. (Amended) A program providing medium for proving a computer program which 
executes person authentication on the computer program by comparing a template stored in a 
person authentication certificate with sampling information, the template being person 
authentication data, and the sampling information being input by a user, 

the computer program comprising: 

a step of confirming whether usage restriction information, which includes either a 
certificate expiration date, a certificate usage number limit, or a template expiration date, is 
stored in [a] the person authentication certificate issued by a person authentication [certificate] 
authority; 

a step of checking the validity of the person authentication certificate on the basis of the 
certificate expiration date, the certificate usage number limit, or the template expiration date in 
person authentication [processing] on the basis of the person authentication certificate; and 
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a step of executing the person authentication by comparing the template, which is stored 
in the person authentication certificate, with the sampling information input by [a] the user on 
[the] a condition that the validity of the person authentication certificate has been confirmed on 
the basis of the certificate expiration date, certificate usage number limit, or the template 
expiration date. 
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